Privacy policy
The protection of personal data is a priority of the General Director for Environmental Protection. Personal data on the websites of the General Directorate for Environmental Protection is processed in accordance with the Privacy Policy.
GDPR
Since 25 May 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (commonly referred to as the “GDPR”) shall enter into force. The GDPR will be applicable to the same extent in all European Union countries, thus also in Poland, and shall introduce a number of amendments to the rules governing the processing of personal data, which will affect many areas of life, including the use of websites of the General Directorate for Environmental Protection.
Please find below the issues on the processing of personal data of persons visiting the websites of the General Directorate for Environmental Protection.
What is personal data?
Pursuant to the GDPR, personal data means any information relating to an identified or identifiable natural person. In the case of using our websites, such data is e.g. e-mail address, IP address or data contained in the email account name or in other service offered by the General Directorate for Environmental Protection. Personal data may be stored in cookie files or similar technologies (e.g. local storage) installed in the IT systems of the General Directorate of Environmental Protection, which are used when using our services. On our websites and applications, we use the above-mentioned technologies to collect and process personal data.
Consent
Please note that as part of the websites being made available, we will process your personal data as the data controller based on a legitimate interest.
Consent, which is voluntary, is necessary to review the resources of the General Directorate for Environmental Protection. If you do not agree to the technologies used, please close the site and remove cookie files from your device.
Personal data controller
The controller of your personal data is the General Director for Environmental Protection based in Warsaw, ul. Wawelska 52/54, 00-922 Warsaw, e-mail: kancelaria@gdos.gov.pl.
Legal basis and purpose of processing
The GDPR provides for several types of legal basis for data processing. Your personal data will be processed in your consent to the processing of your personal data as referred to in Article 6(1)(a) of the GDPR and for the purpose of complying with the legal obligation imposed on the data controller, pursuant to Article 6(1)(c) of the GDPR, implementing a task carried out in public interest or as part of exercising public authority entrusted to the data controller, pursuant to Article 6(1)(e) of the GDPR.
Personal data processing time
The time for which we will process personal data depends on the legal basis constituting a legal condition for the processing of personal data by the GDEP. We will never process personal data for a period longer than that resulting from the legal bases. Your data will always be processed for a period necessary for implementing the purpose of processing, including the archiving obligation resulting from the legislation.
Your rights
Pursuant to the GDPR, you have the following rights related to the processing of personal data on our websites:
- right to request the data controller to provide access to personal data,
- right to request the data controller to rectify personal data,
- right to request the data controller to delete personal data,
- right to request the data controller to restrict the processing of personal data,
- right to lodge an objection with regard to the processing of personal data,
- right to bring a complaint to the supervisory authority – to the President of the Personal Data Protection Office.
Data transfer and profiling
Data may be transferred to other public authorities provided that:
- these authorities are authorised by the applicable legislation,
- they implement a legal obligation imposed on the personal data controller,
- processing is necessary to implement a task carried out in public interest,
- as part of exercising public power entrusted to the personal data controller.
The transfer of data does not relieve the transferor of responsibility for its processing. Your data will not be transferred to third countries.
Data collected by the websites of the General Directorate for Environmental Protection is not and will not be profiled.
Amendments to this Privacy Policy
We undertake to regularly review the Privacy Policy and to amend it each time it is necessary due to the amended legislation, case-law of courts and authorities responsible for the supervision of personal data processing and protection processes.
We also reserve the possibility to amend this Privacy Policy in the event of changes in technology we use for processing personal data (provided that this change affects the wording of this document), as well as in cases of changes in objectives or legal bases of our processing of personal data.